New RedTiger Tool Targets Gamers and Discord Accounts in the Wild

A dangerous infostealer called RedTiger is circulating in the wild, designed to steal Discord credentials, gaming accounts and sensitive financial information from players worldwide. The malware has multiple variants and researchers say attackers are focusing on French-speaking gaming communities. RedTiger originated as a legitimate red-teaming toolkit released in 2024, but the open-source nature has allowed attackers to weaponise its capabilities for malicious use.

It includes phishing kits, network scanning utilities and, crucially, an infostealer that targets Discord by injecting code into the Discord client, as well as harvesting browser-saved passwords, payment card details, cryptocurrency wallet credentials and Roblox login information. The tool uses a two-stage data theft process, uploading stolen data to GoFile via a Discord webhook to keep the attacker hidden, and it can secretly record victims through their webcams. It also features persistence across Windows, Linux and macOS, running automatically at boot to maintain access. 24 October 2025.